MTCSE — Сертифицированный инженер MikroTik по безопасности

MikroTik Certified Security Engineer.

Программа тренинга

Module 1 Introduction

• Threats, mechanisms, attacks and services
• The most common threats
• RouterOS security deployment
• Module 1 laboratory

• Packet flow, firewall chains
• Stateful firewal
• RAW table
• SYN flood mitigation using RAW table
• RouterOS default configuration
• Best practises for management access
• Detecting an attack to critical infrastructure services
• Bridge filter
• Advanced options in firewall filter
• ICMP filtering
• Module 2 laboratory

Module 3 OSI Layer Attacks

• MNDP attacks and prevention
• DHCP: rogue servers, starvation attacks and prevention
• TCP SYN attacks and prevention
• UDP attacks and prevention
• ICMP Smurf attacks and prevention
• FTP, telnet and SSH brute-force attacks and prevention
• Port scan detection and prevention
• Module 3 laboratory

Module 4 Securing the Router

• Port knocking
• Secure connections (HTTPS, SSH, WinBox)
• Default ports for the services
• Tunneling through SSH
• Module 4 laboratory

Module 5 Secure Tunnels

• L2TP/IPsec
• IPsec
• SSTP with certificates
• Module 5 laboratory